icoa-cli 2.19.141 → 2.19.142

package/dist/lib/main-rl.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Shared reference to the main REPL's readline.Interface.
+ *
+ * Linear-flow commands (demo2, future others) need to PAUSE the main
+ * rl while reading their own input — otherwise two readline interfaces
+ * on the same TTY both echo every keystroke ("lang" → "llaanngg") and
+ * both fire 'line' events.
+ *
+ * Pattern:
+ *   1. startRepl() calls setMainRl(rl) right after creating its rl.
+ *   2. Linear-flow command on entry: getMainRl()?.pause()
+ *   3. Linear-flow command on exit:  getMainRl()?.resume()
+ *
+ * Side note: when called from `icoa demo2` direct (no REPL parent),
+ * getMainRl() returns null and pause/resume are no-ops. Correct
+ * behaviour either way.
+ */
+import type { Interface as ReadlineInterface } from 'node:readline';
+export declare function setMainRl(rl: ReadlineInterface | null): void;
+export declare function getMainRl(): ReadlineInterface | null;

package/dist/lib/main-rl.js

@@ -0,0 +1 @@
+let n=null;export function setMainRl(t){n=t}export function getMainRl(){return n}

package/dist/repl.js

@@ -1 +1 @@
-import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{isConnected as l,getConfig as n,saveConfig as s}from"./lib/config.js";import{isActivated as a,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as d}from"./lib/access.js";import{setReplMode as p}from"./lib/ui.js";import{returnToMainMenu as u,printMenuHint as h,menuHintInline as w}from"./lib/menu-nav.js";import{isChatActive as f,handleChatMessage as b}from"./commands/ai4ctf.js";import{isCtf4aiActive as x,handleCtf4aiMessage as v}from"./commands/ctf4ai-demo.js";import{isVla4CtfActive as C,handleVla4CtfMessage as A}from"./commands/vla4ctf.js";import{getExamState as I,getRealExamState as k,getDemoState as T}from"./lib/exam-state.js";import{getDemoStats as $}from"./lib/demo-stats.js";import{isExamSetupComplete as S}from"./lib/exam-setup.js";import{DEMO_PICK_SIZE as O,DEMO_POOL_SIZE as P}from"./lib/demo-exam.js";import{isNativeWindowsCmd as E}from"./lib/platform.js";import{resetTerminalTheme as L}from"./lib/theme.js";import{ensureSandbox as q,runInSandbox as R,isDockerAvailable as D}from"./lib/sandbox.js";import{logCommand as j}from"./lib/logger.js";import{startLogSync as N,stopLogSync as F}from"./lib/log-sync.js";import{existsSync as M,mkdirSync as U,writeFileSync as W}from"node:fs";import{join as z}from"node:path";import{homedir as B}from"node:os";function _(){return k()?chalk.cyan("exam> "):T()?chalk.yellow("demo> "):chalk.green("icoa> ")}const Q=z(B(),"icoa-workspace");function Y(){return M(Q)||U(Q,{recursive:!0}),Q}const V=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),J="__REPL_NO_EXIT__",G="2.5.1";function K(){const o=$(),e=S(),l=`Free practice — ${O} questions (from pool of ${P})`,n=E();if(console.log(),console.log(`   ${chalk.cyan.bold("[Selection Mode]")}`),console.log(),n)console.log(chalk.gray("   Platform: ")+chalk.white("Windows cmd.exe")+chalk.gray(" — routed to Paper C (MCQ-only, 45 min, 70 pts, zero extra tools)")),console.log();else if(o.attempts>0){const o=function(){const o=["python3.12 --version","/opt/homebrew/opt/python@3.12/bin/python3.12 --version","/usr/local/opt/python@3.12/bin/python3.12 --version","python3 --version","python --version","py -3.12 --version","py -3 --version"];let e="",l="missing";for(const n of o)try{const o=t(n,{encoding:"utf-8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim().replace("Python ",""),[s,a]=o.split(".").map(Number);if(3===s&&12===a)return{ok:!0,version:o,status:"ok"};e=o,l=3===s&&a>=10&&a<12?"old":3===s&&a>12?"new":"missing"}catch{}return{ok:"missing"!==l,version:e,status:l}}();"missing"===o.status?(console.log(chalk.yellow("   ⚠ Python not detected. For exam practical questions:")),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (platform install guide)")),console.log()):"new"===o.status&&(console.log(chalk.yellow(`   ⚠ Python ${o.version} may lack CTF wheels. Python 3.12 recommended:`)),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (install guide)")),console.log())}if(0===o.attempts)console.log(chalk.white("   New here? Start with ")+chalk.bold.cyan("demo")+chalk.white(" — it takes a few minutes.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.cyan("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"));else if(e||n){const e=1===o.attempts?"attempt":"attempts";o.attempts>0&&console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e})`)),n||console.log(chalk.green("   ✓ Environment ready")),console.log(chalk.yellow("   → Enter your exam token to begin.")),console.log(chalk.gray("     (10-char code from your organizer, starts with your country code like ")+chalk.cyan("UA")+chalk.gray(" — case-insensitive)")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("     exam <token>")+chalk.gray("    Enter exam (primary action — use your organizer-issued token)")),console.log(chalk.gray("                     format: ")+chalk.white("exam UAxxxxxxxx")+chalk.gray("  (2-letter country prefix + 8 chars)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Other commands:")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),n||console.log(chalk.white("     exam setup")+chalk.gray("      Re-verify tool environment")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}else{const e=1===o.attempts?"attempt":"attempts";console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e}${o.bestPercentage>0?` · best ${o.bestPercentage}%`:""})`)),console.log(chalk.yellow("   → Next: prepare your environment for the real exam.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.bold.yellow("     exam setup")+chalk.gray("      Install tools for national selection (~150MB)")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}console.log(chalk.gray("   ")+chalk.gray("Tip: ")+chalk.cyan("help")+chalk.gray(" for commands · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()}export async function startRepl(e,T){process.env.ICOA_INSIDE_REPL="1";const $=n(),S=l(),O=process.exit.bind(process),P=a();if($.demoCleanedForVersion!==G){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:t}=await import("node:path"),{getIcoaDir:l}=await import("./lib/config.js"),n=t(l(),"demo-state.json");o(n)&&e(n)}catch{}s({demoCleanedForVersion:G})}const{select:E,confirm:H}=await import("@inquirer/prompts"),X=$.mode||"",oo=[{name:`  ${chalk.bold("National Selection")}         ${chalk.gray("—")}  ${chalk.gray("demo, exam (lightweight)")}`,value:"selection"},{name:`  ${chalk.bold("Embodied AI Security")} 🤖    ${chalk.gray("—")}  ${chalk.gray("VLA4CTF: demo, learn, Paper D (pre-competition)")}`,value:"embodied"},{name:`  ${chalk.bold("International Olympiad")}     ${chalk.gray("—")}  ${chalk.gray("CTF × AI (~500MB, advanced)")}`,value:"olympiad"},{name:`  ${chalk.bold("National/Regional Partner")}  ${chalk.gray("—")}  ${chalk.gray("organizer tools (tokens, competitions)")}`,value:"organizer"},{name:`  ${chalk.gray("About ICOA")}                 ${chalk.gray("·")}  ${chalk.gray("Info & contact")}`,value:"about"}];console.log(chalk.gray("   Use ")+chalk.yellow("↑")+chalk.gray(" or ")+chalk.yellow("↓")+chalk.gray(" to select, ")+chalk.yellow("Enter")+chalk.gray(" to confirm.")),console.log();let eo="";for(;!eo;){const o=await E({message:"Mode",choices:oo,default:X||"selection"});"about"!==o?eo=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray(" [Day 1]  AI as teammate — 5hr jeopardy CTF")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray(" [Day 2]  Challenge AI — adversarial ML, red-team")}`),console.log(`   ${chalk.cyan.bold("VLA4CTF")}${chalk.gray(" [Pioneer Round] Embodied AI — attack robot brains (NEW)")}`),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026  ·  40+ countries")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=t=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===eo&&"olympiad"!==X&&(console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models.")),await H({message:"Continue?",default:!0})||(eo="selection",console.log(chalk.gray("   Switched to National Selection mode.")))),eo!==X&&s({mode:eo}),console.log(),"olympiad"===eo&&m(G)){d(G),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let t=0;for(const l of e)try{o(l.cmd,{stdio:"ignore"})}catch{t++}if(t>0){console.log(chalk.yellow(`   ${t} core libraries missing.`));try{const{confirm:o}=await import("@inquirer/prompts");if(await o({message:"  Install competition Python libraries now?",default:!0,theme:{prefix:"",style:{message:o=>chalk.green(o),defaultAnswer:o=>chalk.green(o)}}})){console.log();const{execSync:o}=await import("node:child_process");o("icoa env setup",{stdio:"inherit"})}}catch{console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" later to install."))}console.log()}else console.log(chalk.green("   All core libraries ready.")),console.log()}if(T){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),t=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${t}s | Total exits: ${o.exitCount}`)),console.log()}}"selection"===eo?K():"embodied"===eo?(console.log(chalk.cyan.bold("   [Embodied AI Security  🤖]")),console.log(),console.log(chalk.bold.cyan("   VLA4CTF")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   exploring embodied AI security before the main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms —")),console.log(chalk.gray("   real models, real physics — all on the ICOA stack.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.yellow("★ WOW shortcut")+chalk.gray(" — robot arm replay in seconds")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ~5 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn")+chalk.gray("                   free 11-card intro (LEARNDEMO01)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EAxxxxxxxx")+chalk.gray("        full 100/480-card curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (VLA4CTF) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),h(),console.log()):"organizer"===eo?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),S?(console.log(chalk.green(`   Logged in as ${$.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),h(),console.log()):P&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):S?(console.log(chalk.green.bold(`   Welcome back, ${$.userName}!`)),console.log(chalk.gray(`   Connected to ${$.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):P?(Y(),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${Q}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.white("   Welcome to ICOA CLI — International Olympiad")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()),e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const to=o({input:process.stdin,output:process.stdout,prompt:_(),terminal:!0});let lo=!1;p(!0),N();const no=to.prompt.bind(to);to.prompt=o=>{f()||x()||C()||to.setPrompt(_()),no(o)},to.prompt(),to.on("line",async o=>{if(lo)return;const l=o.trim();if(!l)return to.setPrompt(f()?chalk.magenta("ai4ctf> "):_()),void to.prompt();if("menu"===l||"menu confirm"===l)return k()&&"menu confirm"!==l?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void to.prompt()):void u(to);if(f()){lo=!0;const o=await b(l);return lo=!1,"exit"===o&&to.setPrompt(_()),void to.prompt()}if(x()){lo=!0;const o=await v(l);return lo=!1,"exit"!==o&&"solved"!==o||to.setPrompt(_()),void to.prompt()}if(C()){lo=!0;const o=await A(l);return lo=!1,"exit"===o&&to.setPrompt(_()),to.setPrompt(C()?chalk.bold.cyan("vla4ctf> "):_()),void to.prompt()}if(j(l),"exit"===l)return I()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void to.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===eo&&K(),void to.prompt());if("quit"===l||"q"===l||"quit confirm"===l){const o=I();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==l?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void to.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),F(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),L(),void O(0))}if("back"===l){const o=I(),e=o&&"demo-free"!==o.session.examId,t=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(t){const e=Object.keys(o.answers).length,t=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${t} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=n();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===eo?K():console.log(chalk.gray("  Already at main menu."))}return void to.prompt()}if("help"===l||"?"===l){if(I()){lo=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return lo=!1,void to.prompt()}return function(o,e="olympiad"){console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Personal notepad")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log())}(a(),eo),void to.prompt()}if("more help"===l.toLowerCase()&&I()){lo=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return lo=!1,void to.prompt()}if("continue"===l.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void to.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(l.trim())){lo=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim()])}catch{}return lo=!1,void to.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(l.trim())){lo=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim().toUpperCase()])}catch{}return lo=!1,void to.prompt()}const s=l.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(s){lo=!0;try{await e.parseAsync(["node","icoa","exam","token",s[1].toUpperCase()])}catch{}return lo=!1,void to.prompt()}const y=l.match(/^exam\s+([A-Z]{2,3})$/i);if(y){lo=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return lo=!1,void to.prompt()}if("clear"===l||"cls"===l)return console.clear(),void to.prompt();if(l.startsWith("activate ")){const o=l.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ")+chalk.cyan("UAK7M2R9Q4")+chalk.gray(")")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void to.prompt()}if("activate"===l)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void to.prompt();const m=I();if(m){const o=l.toUpperCase().trim(),t=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},n=o=>{const e="demo-free"!==m.session.examId,t=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),t?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(t)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCD]$/.test(o)){const l=m._lastQ||1;if(t(l))return n(l),void to.prompt();lo=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return lo=!1,void to.prompt()}const s=o.match(/^(\d+)\s+([ABCD])$/);if(s){const o=parseInt(s[1],10);if(t(o))return n(o),void to.prompt();lo=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return lo=!1,void to.prompt()}}const d=l.split(/\s+/)[0].toLowerCase(),p=/^python3?(\.\d+)?$/.test(d),h=l.startsWith("!")||d.startsWith("!")||p;if("embodied"===eo&&!h&&!["demo2","learn","exam","vla4ctf","lang","ref","setup","env","sim"].includes(d))return console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void to.prompt();if("selection"===eo&&!h&&!["exam","demo","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","sim"].includes(d)){if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void to.prompt()}if("organizer"===eo&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(d))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void to.prompt();if(!("olympiad"!==eo||a()&&c()||i(d)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void to.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","vla4ctf","theme","sim"].includes(d)){if(V.has(d))return console.log(chalk.red(`  Blocked: ${d} is not allowed during competition.`)),console.log(),void to.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(l)&&!l.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(l),e=/\.\./.test(l);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${Q}`)),console.log(),void to.prompt()}let o=l.startsWith("!")?l.slice(1).trim():l;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return t("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return t("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=Y();/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=z(B(),".icoa");M(o)||U(o,{recursive:!0});const e=z(o,"python-startup.py");return M(e)||W(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n"),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),lo=!0;try{D()&&await q()?await R(o,to):await Z(o,to,e)}catch{console.log(chalk.yellow(`  Command failed: ${d}`))}return lo=!1,console.log(),void to.prompt()}lo=!0;const w=l.trim(),T=w.toLowerCase();let $,S=null,P="";if(m)if("submit"===T)S="final";else if(T.startsWith("submit ")){let o=w.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)&&(S="flag",P=o)}else/^ICOA\{[^}]+\}$/i.test(w)&&(S="flag",P=w);$="final"===S?["exam","submit"]:"flag"===S?["exam","answer",String(m?._lastQ||1),P]:function(o){const e=o.split(/\s+/),t=e[0].toLowerCase(),l=e.slice(1),n={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...l],unmark:["exam","unmark",...l],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...l],activate:["ctf","activate",...l],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...l],submit:["ctf","submit",...l],flag:["ctf","submit",...l],scoreboard:["ctf","scoreboard",...l],sb:["ctf","scoreboard",...l],status:["ctf","status"],time:["ctf","time"]};return n[t]?n[t]:["ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","ctf4ai"].includes(t)?[t,...l]:e}(l);const E="ctf"===$[0]&&"join"===$[1];E&&to.pause(),process.exit=()=>{throw new Error(J)};try{await e.parseAsync(["node","icoa",...$])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===J);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],t=d.split(/\s+/)[0]||d;let l={word:"",dist:1/0};for(const n of e){const e=o(t.toLowerCase(),n);e<l.dist&&(l={word:n,dist:e})}console.log(chalk.yellow(`  Unknown command: ${d}.`)),l.dist>0&&l.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(l.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=O,lo=!1,E&&to.resume()}f()?to.setPrompt(chalk.magenta("ai4ctf> ")):x()?to.setPrompt(chalk.red("ctf4ai> ")):C()&&to.setPrompt(chalk.bold.cyan("vla4ctf> ")),console.log(),to.prompt()}),to.on("SIGINT",()=>{if(console.log(),f()||x())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(I()){const o="demo-free"!==I().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),to.prompt()}),to.on("close",()=>{F(),g(),L(),O(0)})}function Z(o,t,l){return new Promise(n=>{const s=process.stdin,a=!!s.isTTY&&!!s.isRaw;if(t.pause(),s.isTTY&&"function"==typeof s.setRawMode)try{s.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:l||process.cwd()}),i=()=>{if(s.isTTY&&"function"==typeof s.setRawMode&&a)try{s.setRawMode(!0)}catch{}t.resume(),n()};r.on("close",i),r.on("error",i)})}
+import{createInterface as o}from"node:readline";import{spawn as e,execSync as t}from"node:child_process";import chalk from"chalk";import{isConnected as l,getConfig as n,saveConfig as s}from"./lib/config.js";import{isActivated as a,activateToken as r,isFreeCommand as i,isDeviceMatch as c,recordExit as g,recordResume as y,isFirstRunOrUpgrade as m,markVersionSeen as d}from"./lib/access.js";import{setReplMode as p}from"./lib/ui.js";import{returnToMainMenu as u,printMenuHint as h,menuHintInline as w}from"./lib/menu-nav.js";import{setMainRl as f}from"./lib/main-rl.js";import{isChatActive as b,handleChatMessage as x}from"./commands/ai4ctf.js";import{isCtf4aiActive as v,handleCtf4aiMessage as C}from"./commands/ctf4ai-demo.js";import{isVla4CtfActive as A,handleVla4CtfMessage as I}from"./commands/vla4ctf.js";import{getExamState as k,getRealExamState as T,getDemoState as $}from"./lib/exam-state.js";import{getDemoStats as S}from"./lib/demo-stats.js";import{isExamSetupComplete as O}from"./lib/exam-setup.js";import{DEMO_PICK_SIZE as P,DEMO_POOL_SIZE as E}from"./lib/demo-exam.js";import{isNativeWindowsCmd as L}from"./lib/platform.js";import{resetTerminalTheme as q}from"./lib/theme.js";import{ensureSandbox as R,runInSandbox as j,isDockerAvailable as D}from"./lib/sandbox.js";import{logCommand as N}from"./lib/logger.js";import{startLogSync as F,stopLogSync as M}from"./lib/log-sync.js";import{existsSync as U,mkdirSync as W,writeFileSync as z}from"node:fs";import{join as B}from"node:path";import{homedir as _}from"node:os";function Q(){return T()?chalk.cyan("exam> "):$()?chalk.yellow("demo> "):chalk.green("icoa> ")}const Y=B(_(),"icoa-workspace");function V(){return U(Y)||W(Y,{recursive:!0}),Y}const J=new Set(["sudo","su","doas","pkexec","brew","apt","apt-get","yum","choco","npm","npx","pip","pip3","shutdown","reboot","halt","mkfs","fdisk","dd","iptables","ufw"]),G="__REPL_NO_EXIT__",K="2.5.1";function Z(){const o=S(),e=O(),l=`Free practice — ${P} questions (from pool of ${E})`,n=L();if(console.log(),console.log(`   ${chalk.cyan.bold("[Selection Mode]")}`),console.log(),n)console.log(chalk.gray("   Platform: ")+chalk.white("Windows cmd.exe")+chalk.gray(" — routed to Paper C (MCQ-only, 45 min, 70 pts, zero extra tools)")),console.log();else if(o.attempts>0){const o=function(){const o=["python3.12 --version","/opt/homebrew/opt/python@3.12/bin/python3.12 --version","/usr/local/opt/python@3.12/bin/python3.12 --version","python3 --version","python --version","py -3.12 --version","py -3 --version"];let e="",l="missing";for(const n of o)try{const o=t(n,{encoding:"utf-8",timeout:2e3,stdio:["ignore","pipe","ignore"]}).trim().replace("Python ",""),[s,a]=o.split(".").map(Number);if(3===s&&12===a)return{ok:!0,version:o,status:"ok"};e=o,l=3===s&&a>=10&&a<12?"old":3===s&&a>12?"new":"missing"}catch{}return{ok:"missing"!==l,version:e,status:l}}();"missing"===o.status?(console.log(chalk.yellow("   ⚠ Python not detected. For exam practical questions:")),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (platform install guide)")),console.log()):"new"===o.status&&(console.log(chalk.yellow(`   ⚠ Python ${o.version} may lack CTF wheels. Python 3.12 recommended:`)),console.log(chalk.gray("     → ")+chalk.bold.cyan("env python")+chalk.gray("  (install guide)")),console.log())}if(0===o.attempts)console.log(chalk.white("   New here? Start with ")+chalk.bold.cyan("demo")+chalk.white(" — it takes a few minutes.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.cyan("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"));else if(e||n){const e=1===o.attempts?"attempt":"attempts";o.attempts>0&&console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e})`)),n||console.log(chalk.green("   ✓ Environment ready")),console.log(chalk.yellow("   → Enter your exam token to begin.")),console.log(chalk.gray("     (10-char code from your organizer, starts with your country code like ")+chalk.cyan("UA")+chalk.gray(" — case-insensitive)")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.yellow("     exam <token>")+chalk.gray("    Enter exam (primary action — use your organizer-issued token)")),console.log(chalk.gray("                     format: ")+chalk.white("exam UAxxxxxxxx")+chalk.gray("  (2-letter country prefix + 8 chars)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Other commands:")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),n||console.log(chalk.white("     exam setup")+chalk.gray("      Re-verify tool environment")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}else{const e=1===o.attempts?"attempt":"attempts";console.log(chalk.green("   ✓ Demo completed ")+chalk.gray(`(${o.attempts} ${e}${o.bestPercentage>0?` · best ${o.bestPercentage}%`:""})`)),console.log(chalk.yellow("   → Next: prepare your environment for the real exam.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("     demo")+chalk.gray(`            ${l}`)),console.log(chalk.bold.yellow("     exam setup")+chalk.gray("      Install tools for national selection (~150MB)")),console.log(chalk.white("     lang")+chalk.gray("            List all supported languages")),console.log(chalk.white("     lang es")+chalk.gray("         Switch language (e.g. lang es, lang zh, lang fr)")),console.log(chalk.gray("   ─────────────────────────────────────────────"))}console.log(chalk.gray("   ")+chalk.gray("Tip: ")+chalk.cyan("help")+chalk.gray(" for commands · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()}export async function startRepl(e,$){process.env.ICOA_INSIDE_REPL="1";const S=n(),O=l(),P=process.exit.bind(process),E=a();if(S.demoCleanedForVersion!==K){try{const{existsSync:o,unlinkSync:e}=await import("node:fs"),{join:t}=await import("node:path"),{getIcoaDir:l}=await import("./lib/config.js"),n=t(l(),"demo-state.json");o(n)&&e(n)}catch{}s({demoCleanedForVersion:K})}const{select:L,confirm:X}=await import("@inquirer/prompts"),oo=S.mode||"",eo=[{name:`  ${chalk.bold("National Selection")}         ${chalk.gray("—")}  ${chalk.gray("demo, exam (lightweight)")}`,value:"selection"},{name:`  ${chalk.bold("Embodied AI Security")} 🤖    ${chalk.gray("—")}  ${chalk.gray("VLA4CTF: demo, learn, Paper D (pre-competition)")}`,value:"embodied"},{name:`  ${chalk.bold("International Olympiad")}     ${chalk.gray("—")}  ${chalk.gray("CTF × AI (~500MB, advanced)")}`,value:"olympiad"},{name:`  ${chalk.bold("National/Regional Partner")}  ${chalk.gray("—")}  ${chalk.gray("organizer tools (tokens, competitions)")}`,value:"organizer"},{name:`  ${chalk.gray("About ICOA")}                 ${chalk.gray("·")}  ${chalk.gray("Info & contact")}`,value:"about"}];console.log(chalk.gray("   Use ")+chalk.yellow("↑")+chalk.gray(" or ")+chalk.yellow("↓")+chalk.gray(" to select, ")+chalk.yellow("Enter")+chalk.gray(" to confirm.")),console.log();let to="";for(;!to;){const o=await L({message:"Mode",choices:eo,default:oo||"selection"});"about"!==o?to=o:(console.clear(),console.log(),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(chalk.bold.yellow("   ICOA")+chalk.white(" — AI-Native CLI OS for Cyber & AI Security")),console.log(chalk.gray("   Olympiad & Competition  ·  K-12 to University")),console.log(chalk.cyan("  ───────────────────────────────────────────────────")),console.log(),console.log(chalk.bold.white("   What Makes ICOA Different")),console.log(chalk.gray("   · AI-native     AI teammate, AI adversary, AI translation")),console.log(chalk.gray("   · CLI OS        Complete competition environment in terminal")),console.log(chalk.gray("   · 110 tools     pwntools, z3, gdb, nmap, sleuthkit... pre-configured")),console.log(chalk.gray("   · Global scale  15,000+ concurrent exams · 15 languages")),console.log(),console.log(chalk.bold.white("   Competition Format")),console.log(`   ${chalk.green.bold("AI4CTF")}${chalk.gray(" [Day 1]  AI as teammate — 5hr jeopardy CTF")}`),console.log(`   ${chalk.red.bold("CTF4AI")}${chalk.gray(" [Day 2]  Challenge AI — adversarial ML, red-team")}`),console.log(`   ${chalk.cyan.bold("VLA4CTF")}${chalk.gray(" [Pioneer Round] Embodied AI — attack robot brains (NEW)")}`),console.log(),console.log(chalk.white("   Sydney, Australia")+chalk.gray("  ·  Jun 27 - Jul 2, 2026  ·  40+ countries")),console.log(),console.log(chalk.bold.white("   Organized by")+chalk.gray("  ASRA (Australia) · ICO Foundation Inc")),console.log(chalk.bold.white("   Contact     ")+chalk.cyan(" australia@icoa2026.au  ·  accreditation@icoa2026.au")),console.log(chalk.bold.white("   Website     ")+chalk.cyan.underline(" https://icoa2026.au")),console.log(chalk.cyan("  ═══════════════════════════════════════════════════")),console.log(),console.log(chalk.gray("   Press ")+chalk.yellow("Enter")+chalk.gray(" to return...")),await new Promise(o=>{const e=t=>{process.stdin.removeListener("data",e),process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!1),process.stdin.pause(),o()};process.stdin.isTTY&&process.stdin.setRawMode&&process.stdin.setRawMode(!0),process.stdin.resume(),process.stdin.once("data",e)}),console.clear())}if("olympiad"===to&&"olympiad"!==oo&&(console.log(),console.log(chalk.yellow("   This mode will download ~500MB of CTF tools and AI models.")),await X({message:"Continue?",default:!0})||(to="selection",console.log(chalk.gray("   Switched to National Selection mode.")))),to!==oo&&s({mode:to}),console.log(),"olympiad"===to&&m(K)){d(K),console.log(chalk.gray("   Checking competition environment..."));const{execSync:o}=await import("node:child_process"),e=[{name:"pwntools",cmd:'python3 -c "import pwn"'},{name:"z3-solver",cmd:'python3 -c "import z3"'},{name:"numpy",cmd:'python3 -c "import numpy"'},{name:"requests",cmd:'python3 -c "import requests"'}];let t=0;for(const l of e)try{o(l.cmd,{stdio:"ignore"})}catch{t++}if(t>0){console.log(chalk.yellow(`   ${t} core libraries missing.`));try{const{confirm:o}=await import("@inquirer/prompts");if(await o({message:"  Install competition Python libraries now?",default:!0,theme:{prefix:"",style:{message:o=>chalk.green(o),defaultAnswer:o=>chalk.green(o)}}})){console.log();const{execSync:o}=await import("node:child_process");o("icoa env setup",{stdio:"inherit"})}}catch{console.log(chalk.gray("   Run ")+chalk.white("env setup")+chalk.gray(" later to install."))}console.log()}else console.log(chalk.green("   All core libraries ready.")),console.log()}if($){const o=y();if(o){const e=Math.floor(o.awaySeconds/60),t=o.awaySeconds%60;console.log(chalk.yellow(`   Session resumed. Away: ${e}m ${t}s | Total exits: ${o.exitCount}`)),console.log()}}"selection"===to?Z():"embodied"===to?(console.log(chalk.cyan.bold("   [Embodied AI Security  🤖]")),console.log(),console.log(chalk.bold.cyan("   VLA4CTF")+chalk.gray(" — ICOA 2026's ")+chalk.bold.white("Pioneer Round")),console.log(chalk.gray("   exploring embodied AI security before the main events: ")+chalk.green("AI4CTF")+chalk.gray(" (Day 1) and ")+chalk.red("CTF4AI")+chalk.gray(" (Day 2)")),console.log(),console.log(chalk.white("   Embodied AI is at its ImageNet moment.")),console.log(chalk.gray("   VLA models, MuJoCo physics, real robot arms —")),console.log(chalk.gray("   real models, real physics — all on the ICOA stack.")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.bold.green("     sim")+chalk.gray("                     ")+chalk.bold.yellow("★ WOW shortcut")+chalk.gray(" — robot arm replay in seconds")),console.log(chalk.bold.green("     demo2")+chalk.gray("                   ~5 min interactive intro + live MuJoCo sim")),console.log(chalk.bold.green("     learn")+chalk.gray("                   free 11-card intro (LEARNDEMO01)")),console.log(chalk.bold.green("     learn ")+chalk.bold.yellow("EAxxxxxxxx")+chalk.gray("        full 100/480-card curriculum (team-issued)")),console.log(chalk.bold.green("     exam ")+chalk.bold.yellow("PDxxxxxxxx")+chalk.gray("         Paper D (VLA4CTF) — national selection contestants")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),console.log(chalk.gray("   Three open tiers: ")+chalk.green("free 11")+chalk.gray(" · ")+chalk.yellow("registered 100")+chalk.gray(" · ")+chalk.bold.magenta("national team 480")+chalk.gray(" (PhD-ready)")),console.log(chalk.gray("   Country team contact: ")+chalk.cyan("australia@icoa2026.au")),console.log(),h(),console.log()):"organizer"===to?(console.log(chalk.yellow.bold("   [National/Regional Partner]")),console.log(),console.log(chalk.bold.white("   ██╗ ██████╗ ██████╗  █████╗")),console.log(chalk.bold.white("   ██║██╔════╝██╔═══██╗██╔══██╗")),console.log(chalk.bold.white("   ██║██║     ██║   ██║███████║")),console.log(chalk.bold.white("   ██║██║     ██║   ██║██╔══██║")),console.log(chalk.bold.white("   ██║╚██████╗╚██████╔╝██║  ██║")),console.log(chalk.bold.white("   ╚═╝ ╚═════╝ ╚═════╝ ╚═╝  ╚═╝")),console.log(),console.log(chalk.yellow("   International Cyber Olympiad in AI 2026")),console.log(chalk.bold.magenta("   The World's First AI-Native CLI Operating System")),console.log(chalk.bold.magenta("   for Cybersecurity & AI Security Competition")),console.log(chalk.bold.magenta("   and Olympiad for K-12")),console.log(chalk.gray("   Sydney, Australia · Jun 27 - Jul 2, 2026")),console.log(),console.log(chalk.white("   Vision")),console.log(chalk.gray("   Building a global pipeline for youth cyber & AI")),console.log(chalk.gray("   security talent through education and competition.")),console.log(),console.log(chalk.white("   Capacity")),console.log(chalk.gray("   15,000+ concurrent online examinations")),console.log(chalk.gray("   National selection, training, and education support")),console.log(),console.log(chalk.white("   Olympic Spirit")),console.log(chalk.gray("   Excellence · Friendship · Respect")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   New country accreditation & support:")),console.log(chalk.cyan("     australia@icoa2026.au")),console.log(chalk.cyan("     accreditation@icoa2026.au")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(),O?(console.log(chalk.green(`   Logged in as ${S.userName}`)),console.log(chalk.white("     exam list")+chalk.gray("       Manage exams")),console.log(chalk.white("     logout")+chalk.gray("          Disconnect"))):console.log(chalk.white("     join <url>")+chalk.gray("      Connect to manage exams")),console.log(),h(),console.log()):E&&!c()?(console.log(chalk.red("   Token was activated on a different device.")),console.log(chalk.gray("   Contact organizer for assistance.")),console.log()):O?(console.log(chalk.green.bold(`   Welcome back, ${S.userName}!`)),console.log(chalk.gray(`   Connected to ${S.ctfdUrl}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Ready to compete? Start here:")),console.log(),console.log(chalk.bold.cyan("     challenges")+chalk.gray("     Browse challenges by category")),console.log(chalk.white("     status")+chalk.gray("         Your score & hint budget")),console.log(chalk.white("     scoreboard")+chalk.gray("     Live rankings")),console.log(chalk.white("     help")+chalk.gray("           Full command list")),console.log(),console.log(chalk.gray("   Tool environment:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("help")+chalk.gray(" · ")+w()+chalk.gray(" · ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+chalk.cyan("quit")+chalk.gray(" closes")),console.log()):E?(V(),console.log(chalk.green.bold("   Welcome, competitor!")),console.log(chalk.gray(`   Workspace: ${Y}`)),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   Get started:")),console.log(),console.log(chalk.white("   Step 1  ")+chalk.bold.cyan("join <url>")+chalk.gray("   Connect to competition server")),console.log(chalk.white("   Step 2  ")+chalk.bold.cyan("challenges")+chalk.gray("   Browse & solve challenges")),console.log(chalk.white("   Step 3  ")+chalk.bold.cyan("ai4ctf")+chalk.gray("       Ask AI when stuck")),console.log(),console.log(chalk.gray("   Before Step 1 — make sure your tools are ready:")),console.log(chalk.white("     env")+chalk.gray("            See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("      Install anything missing (~5 min, one-time)")),console.log(),console.log(chalk.gray("   Also: ")+chalk.white("help")+chalk.gray(" all commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()):(console.log(chalk.bold.white("   Welcome to ICOA CLI — International Olympiad")),console.log(),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.white("   To begin, activate your competition token:")),console.log(),console.log(chalk.bold.cyan("     activate <token>")),console.log(),console.log(chalk.gray("   While waiting, explore:")),console.log(chalk.white("     ref linux")+chalk.gray("       Quick reference for Linux")),console.log(chalk.white("     ref web")+chalk.gray("         Quick reference for Web")),console.log(chalk.white("     env")+chalk.gray("             See which of the 110 CTF tools are installed")),console.log(chalk.white("     env setup")+chalk.gray("       Install anything missing (~5 min, one-time)")),console.log(chalk.white("     help")+chalk.gray("            All available commands")),console.log(chalk.gray("   ─────────────────────────────────────────────")),console.log(chalk.gray("   Tip: ")+chalk.cyan("Ctrl+C")+chalk.gray(" pauses · ")+w()+chalk.gray(" · ")+chalk.cyan("quit")+chalk.gray(" closes CLI")),console.log()),e.exitOverride(),e.configureOutput({writeErr:()=>{},writeOut:o=>{console.log(o)}});const lo=o({input:process.stdin,output:process.stdout,prompt:Q(),terminal:!0});f(lo);let no=!1;p(!0),F();const so=lo.prompt.bind(lo);lo.prompt=o=>{b()||v()||A()||lo.setPrompt(Q()),so(o)},lo.prompt(),lo.on("line",async o=>{if(no)return;const l=o.trim();if(!l)return lo.setPrompt(b()?chalk.magenta("ai4ctf> "):Q()),void lo.prompt();if("menu"===l||"menu confirm"===l)return T()&&"menu confirm"!==l?(console.log(),console.log(chalk.yellow("  Real exam active. Progress is auto-saved.")),console.log(chalk.gray("  To return to main menu anyway, type ")+chalk.white("menu confirm")),console.log(),void lo.prompt()):void u(lo);if(b()){no=!0;const o=await x(l);return no=!1,"exit"===o&&lo.setPrompt(Q()),void lo.prompt()}if(v()){no=!0;const o=await C(l);return no=!1,"exit"!==o&&"solved"!==o||lo.setPrompt(Q()),void lo.prompt()}if(A()){no=!0;const o=await I(l);return no=!1,"exit"===o&&lo.setPrompt(Q()),lo.setPrompt(A()?chalk.bold.cyan("vla4ctf> "):Q()),void lo.prompt()}if(N(l),"exit"===l)return k()?(console.log(),console.log(chalk.yellow("  ⚠ An exam is in progress.")),console.log(chalk.white("  To return to menu without losing progress, type: ")+chalk.bold.cyan("back")),console.log(chalk.white("  To fully close ICOA CLI, type: ")+chalk.bold.cyan("quit")),console.log(chalk.gray("  Your progress is auto-saved either way.")),console.log(),void lo.prompt()):(console.log(),console.log(chalk.gray("  ")+chalk.white("exit")+chalk.gray(" returns to the main menu. To fully close ICOA CLI, type ")+chalk.bold.cyan("quit")+chalk.gray(".")),"selection"===to&&Z(),void lo.prompt());if("quit"===l||"q"===l||"quit confirm"===l){const o=k();return o&&"demo-free"!==o.session.examId&&"quit confirm"!==l?(console.log(),console.log(chalk.yellow("  ⚠ A real exam is in progress.")),console.log(chalk.gray("    Your answers are auto-saved on the server, but the exam timer keeps ticking")),console.log(chalk.gray("    on the server side even if you close the CLI.")),console.log(),console.log(chalk.white("  To leave the CLI but keep the exam alive, type: ")+chalk.bold.cyan("back")),console.log(chalk.gray("    (recommended — you can resume with ")+chalk.cyan("exam q 1")+chalk.gray(" after relaunching icoa)")),console.log(),console.log(chalk.white("  To really close ICOA CLI, type: ")+chalk.bold.cyan("quit confirm")),console.log(),void lo.prompt()):(o&&"demo-free"===o.session.examId&&(console.log(),console.log(chalk.gray("  Demo paused. Resume with: ")+chalk.white("demo")+chalk.gray(" (fresh) or ")+chalk.white("exam q 1")+chalk.gray(" (continue)."))),M(),g(),console.log(chalk.gray("  Session saved. Use ")+chalk.white("icoa --resume")+chalk.gray(" to continue.")),q(),void P(0))}if("back"===l){const o=k(),e=o&&"demo-free"!==o.session.examId,t=o&&"demo-free"===o.session.examId&&(()=>{const e=new Date(o.session.startedAt||0).getTime();return Date.now()-e<18e5})();if(e)console.log(),console.log(chalk.gray("  Exam paused. Your progress is saved.")),console.log(chalk.white("  Resume: exam q 1")+chalk.gray("  ·  ")+chalk.white("exam review")+chalk.gray("  ·  ")+chalk.white("exam submit")),console.log();else if(t){const e=Object.keys(o.answers).length,t=o.session.questionCount;console.log(),console.log(chalk.gray(`  Demo paused (${e}/${t} answered). Resume with: `)+chalk.white("exam q 1")),console.log(chalk.gray("  Or type ")+chalk.white("demo")+chalk.gray(" to restart.")),console.log()}else{if(o&&"demo-free"===o.session.examId){const{clearExamState:o}=await import("./lib/exam-state.js");o("demo-free")}const e=n();fetch("https://practice.icoa2026.au/api/icoa/demo-stats",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({type:"post-report-back",lang:e.language||"en",timestamp:(new Date).toISOString()}),signal:AbortSignal.timeout(5e3)}).catch(()=>{}),"selection"===to?Z():console.log(chalk.gray("  Already at main menu."))}return void lo.prompt()}if("help"===l||"?"===l){if(k()){no=!0;try{await e.parseAsync(["node","icoa","exam","help"])}catch{}return no=!1,void lo.prompt()}return function(o,e="olympiad"){console.log(),"selection"===e||"organizer"===e?(console.log(chalk.bold.white("  Exam")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to exam server")),console.log(chalk.white("    exam list           ")+chalk.gray("Available exams")),console.log(chalk.white("    exam start <id>     ")+chalk.gray("Begin an exam")),console.log(chalk.white("    exam q [n]          ")+chalk.gray("View questions")),console.log(chalk.white("    exam answer <n> <X> ")+chalk.gray("Answer question")),console.log(chalk.white("    exam review         ")+chalk.gray("Review all answers")),console.log(chalk.white("    exam submit         ")+chalk.gray("Submit for grading")),console.log(chalk.white("    exam result         ")+chalk.gray("View your score")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    setup               ")+chalk.gray("Settings / switch mode")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log()):o?(console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(chalk.bold.white("  How it works")),console.log(),console.log(chalk.gray("  1. Browse ")+chalk.white("challenges")+chalk.gray(" and pick one")),console.log(chalk.gray("  2. ")+chalk.white("open <id>")+chalk.gray(" to read the challenge")),console.log(chalk.gray("  3. Use ")+chalk.white("ai4ctf")+chalk.gray(" to chat with AI when stuck")),console.log(chalk.gray("  4. ")+chalk.white("submit <id> icoa{flag}")+chalk.gray(" to score points")),console.log(chalk.gray("  5. Check ")+chalk.white("scoreboard")+chalk.gray(" to track your rank")),console.log(chalk.cyan("  ═══════════════════════════════════════════════")),console.log(),console.log(chalk.bold.white("  Competition")),console.log(chalk.white("    join <url>          ")+chalk.gray("Connect to CTFd")),console.log(chalk.white("    challenges (ch)     ")+chalk.gray("List challenges by category")),console.log(chalk.white("    open <id>           ")+chalk.gray("Read challenge + get next steps")),console.log(chalk.white("    submit <id> <flag>  ")+chalk.gray("Submit a flag")),console.log(chalk.white("    scoreboard (sb)     ")+chalk.gray("Live rankings")),console.log(chalk.white("    status              ")+chalk.gray("Your score, budget & timer")),console.log(chalk.white("    time                ")+chalk.gray("Countdown timer")),console.log(),console.log(chalk.bold.white("  AI Teammate")+chalk.gray(" — 3 levels, use wisely")),console.log(chalk.white('    hint "question"     ')+chalk.gray("Level A — General guidance (50 uses)")),console.log(chalk.white('    hint-b "question"   ')+chalk.gray("Level B — Deep analysis (10 uses)")),console.log(chalk.white('    hint-c "question"   ')+chalk.gray("Level C — Critical assist (2 uses)")),console.log(chalk.white("    hint budget         ")+chalk.gray("Check remaining uses")),console.log(chalk.white("    ai4ctf              ")+chalk.gray("Free-chat with AI (no limit)")),console.log(),console.log(chalk.bold.white("  Tools")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference (linux, web, crypto...)")),console.log(chalk.white("    shell               ")+chalk.gray("Docker sandbox")),console.log(chalk.white("    files <id>          ")+chalk.gray("Download challenge files")),console.log(chalk.white("    connect <id>        ")+chalk.gray("Connect to remote target")),console.log(chalk.white("    note [text]         ")+chalk.gray("Personal notepad")),console.log(chalk.white("    log                 ")+chalk.gray("Session history")),console.log(),console.log(chalk.bold.white("  System")),console.log(chalk.white("    setup               ")+chalk.gray("Configure settings")),console.log(chalk.white("    lang [code]         ")+chalk.gray("Switch language (15 supported)")),console.log(chalk.white("    logout              ")+chalk.gray("Disconnect")),console.log(chalk.white("    clear               ")+chalk.gray("Clear screen")),console.log(chalk.white("    exit                ")+chalk.gray("Quit (session saved)")),console.log()):(console.log(chalk.bold.yellow("  Restricted Mode — activate with a token to unlock all commands")),console.log(),console.log(chalk.white("    activate <token>    ")+chalk.gray("Unlock full access")),console.log(chalk.white("    ref [topic]         ")+chalk.gray("Quick reference")),console.log(chalk.white("    exit                ")+chalk.gray("Quit")),console.log())}(a(),to),void lo.prompt()}if("more help"===l.toLowerCase()&&k()){no=!0;try{await e.parseAsync(["node","icoa","exam","more-help"])}catch{}return no=!1,void lo.prompt()}if("continue"===l.toLowerCase())return console.log(),console.log(chalk.green.bold("  ═══ AI4CTF — AI as Your Teammate ═══")),console.log(),console.log(chalk.white("  In AI4CTF, you solve cybersecurity challenges")),console.log(chalk.white("  with AI by your side.")),console.log(),console.log(chalk.white("  In competition, you get AI help at 3 levels:")),console.log(chalk.yellow("    hint a")+chalk.gray("    General guidance (50 uses)")),console.log(chalk.yellow("    hint b")+chalk.gray("    Deep analysis (10 uses)")),console.log(chalk.yellow("    hint c")+chalk.gray("    Critical assist (2 uses)")),console.log(),console.log(chalk.white("  Try it now! Type: ")+chalk.bold.green("ai4ctf")),console.log(chalk.gray('  Chat freely with your AI teammate. Type "exit" when done.')),console.log(),console.log(chalk.gray("  After ai4ctf, try: ")+chalk.bold.red("ctf4ai")+chalk.gray(' — trick the AI into saying "koala"')),console.log(),void lo.prompt();if(/^ICOA-[A-Z]{2,3}-\d{1,6}$/i.test(l.trim())){no=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim()])}catch{}return no=!1,void lo.prompt()}if(/^[A-Z]{2}[0-9A-HJKMNP-TV-Z]{8}$/i.test(l.trim())){no=!0;try{await e.parseAsync(["node","icoa","exam","token",l.trim().toUpperCase()])}catch{}return no=!1,void lo.prompt()}const s=l.match(/^exam\s+([A-Z]{2}[0-9A-HJKMNP-TV-Z]{8})$/i);if(s){no=!0;try{await e.parseAsync(["node","icoa","exam","token",s[1].toUpperCase()])}catch{}return no=!1,void lo.prompt()}const y=l.match(/^exam\s+([A-Z]{2,3})$/i);if(y){no=!0;try{await e.parseAsync(["node","icoa","exam","list",y[1]])}catch{}return no=!1,void lo.prompt()}if("clear"===l||"cls"===l)return console.clear(),void lo.prompt();if(l.startsWith("activate ")){const o=l.slice(9).trim(),e=r(o);return"ok"===e?console.log(chalk.green("  Access granted! Token bound to this device.")):"already_bound"===e?(console.log(),console.log(chalk.red("  Token already activated on a different device.")),console.log(chalk.gray("  Each token binds to the first device that uses it. If you lost the device,")),console.log(chalk.gray("  contact your proctor to have the token re-issued for a new device."))):(console.log(),console.log(chalk.red("  Token not recognized.")),console.log(chalk.gray("  Possible reasons:")),console.log(chalk.white("    • ")+chalk.gray("Typo — tokens are case-insensitive, 10 chars, start with a 2-letter country code (e.g. ")+chalk.cyan("UAK7M2R9Q4")+chalk.gray(")")),console.log(chalk.white("    • ")+chalk.gray("Expired — ask your proctor or organizer for a fresh token")),console.log(chalk.white("    • ")+chalk.gray("Network — verify connection to ")+chalk.cyan("practice.icoa2026.au")),console.log(chalk.gray("  Still stuck? type ")+chalk.cyan("help")+chalk.gray(" or try ")+chalk.cyan("exam demo")+chalk.gray(" for a free practice round."))),console.log(),void lo.prompt()}if("activate"===l)return console.log(chalk.gray("  Usage: ")+chalk.white("activate <token>")),console.log(),void lo.prompt();const m=k();if(m){const o=l.toUpperCase().trim(),t=o=>{const e=m.questions.find(e=>e.number===o);return!!e&&("ai4ctf"===e.type||"ctf4ai"===e.type||e.options&&!e.options.A&&!e.options.B)},n=o=>{const e="demo-free"!==m.session.examId,t=e&&o>=39?"ctf4ai":e&&o>=31?"ai4ctf":null;console.log(),console.log(chalk.yellow(`  Q${o} is a practical question — letters (A/B/C/D) don't apply here.`)),t?(console.log(chalk.white("  Enter the AI chat for this question:  ")+chalk.bold.cyan(t)),console.log(chalk.gray("  Or submit a flag directly: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`))):console.log(chalk.gray("  Submit a flag: ")+chalk.green(`exam answer ${o} ICOA{your_flag}`)),console.log()};if(/^[ABCD]$/.test(o)){const l=m._lastQ||1;if(t(l))return n(l),void lo.prompt();no=!0;try{await e.parseAsync(["node","icoa","exam","answer",String(l),o])}catch{}return no=!1,void lo.prompt()}const s=o.match(/^(\d+)\s+([ABCD])$/);if(s){const o=parseInt(s[1],10);if(t(o))return n(o),void lo.prompt();no=!0;try{await e.parseAsync(["node","icoa","exam","answer",s[1],s[2]])}catch{}return no=!1,void lo.prompt()}}const d=l.split(/\s+/)[0].toLowerCase(),p=/^python3?(\.\d+)?$/.test(d),h=l.startsWith("!")||d.startsWith("!")||p;if("embodied"===to&&!h&&!["demo2","learn","exam","vla4ctf","lang","ref","setup","env","sim"].includes(d))return console.log(chalk.gray("  Not available in Embodied AI Security mode.")),console.log(chalk.white("  Try ")+chalk.bold.cyan("demo2")+chalk.gray(" (intro) · ")+chalk.bold.cyan("learn")+chalk.gray(" (curriculum) · ")+chalk.bold.cyan("exam <PD-token>")+chalk.gray(" (Paper D)")),console.log(),void lo.prompt();if("selection"===to&&!h&&!["exam","demo","retry","nations","next","prev","continue","setup","lang","ref","ai4ctf","ctf4ai","mark","unmark","review","submit","env","sim"].includes(d)){if(console.log(chalk.gray("  Not available in Selection mode.")),m){const o=m._lastQ||1;console.log(chalk.white(`  Resume exam: exam q ${o}`)+chalk.gray("  ·  ")+chalk.white("A/B/C/D")+chalk.gray(" to answer"))}else console.log(chalk.gray("  Try: demo  ·  setup to switch mode"));return console.log(),void lo.prompt()}if("organizer"===to&&!["join","exam","demo","retry","next","prev","logout","setup","lang","ref","ctf","mark","unmark","review","submit"].includes(d))return console.log(chalk.gray("  Not available in Organizer mode. Switch via: setup")),console.log(),void lo.prompt();if(!("olympiad"!==to||a()&&c()||i(d)))return console.log(chalk.yellow("  Restricted mode. ")+chalk.gray("Enter your access token:")),console.log(chalk.white("    activate <token>")),console.log(),console.log(chalk.gray("  Free commands: ")+chalk.white("ref [topic]")+chalk.gray(", ")+chalk.white("help")+chalk.gray(", ")+chalk.white("exit")),console.log(),void lo.prompt();if(!["join","activate","challenges","ch","open","submit","flag","scoreboard","sb","status","time","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","demo","retry","nations","next","prev","continue","logout","ctf4ai","mark","unmark","review","submit","learn","demo2","vla4ctf","theme","sim"].includes(d)){if(J.has(d))return console.log(chalk.red(`  Blocked: ${d} is not allowed during competition.`)),console.log(),void lo.prompt();if(/(?:^|\s)(?:\/(?!home\/|Users\/|tmp\/)|\.\.\/|~\/)/.test(l)&&!l.startsWith("cd ")){const o=/(?:^|\s)\/(?!home\/\w+\/icoa-workspace|Users\/\w+\/icoa-workspace|tmp\/)/.test(l),e=/\.\./.test(l);if(o||e)return console.log(chalk.red("  Blocked: access outside workspace is not allowed.")),console.log(chalk.gray(`  Workspace: ${Y}`)),console.log(),void lo.prompt()}let o=l.startsWith("!")?l.slice(1).trim():l;if("darwin"===process.platform){const e="/opt/homebrew/opt/python@3.12/bin/python3.12";o=o.replace(/^python3?\s/,`${e} `).replace(/^(python3|python)$/,e)}else if("win32"===process.platform){const e=(()=>{try{return t("py -3 --version",{stdio:["ignore","ignore","ignore"],timeout:1500}),"py -3"}catch{}return"python"})();o=o.replace(/^python3?(\.\d+)?\s/,`${e} `).replace(/^python3?(\.\d+)?$/,e)}else{const e=(()=>{try{return t("which python3.12",{stdio:"ignore"}),"python3.12"}catch{return"python3"}})();o=o.replace(/^python\s/,`${e} `).replace(/^python$/,e)}const e=V();/^(\S*python3?(\.\d+)?)\s*$/.test(o)&&(o=`PYTHONSTARTUP="${function(){const o=B(_(),".icoa");U(o)||W(o,{recursive:!0});const e=B(o,"python-startup.py");return U(e)||z(e,"# ICOA exam interactive startup — auto-loaded by PYTHONSTARTUP\nimport base64, struct, hashlib, re, json, os, sys, binascii\ntry: import requests\nexcept ImportError: pass\ntry: from Crypto.Cipher import AES\nexcept ImportError: pass\ntry: from Crypto.Util.Padding import pad, unpad\nexcept ImportError: pass\ntry: from pwn import xor, p32, u32, p64, u64\nexcept ImportError: pass\ntry: import bs4\nexcept ImportError: pass\ntry: import numpy as np\nexcept ImportError: pass\n"),e}()}" ${o}`,console.log(),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(chalk.bold.white("  Python ready — ICOA exam toolkit pre-loaded")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log(),console.log(chalk.white("  Already imported: ")+chalk.gray("base64, struct, hashlib, re, json, binascii")),console.log(chalk.white("  Also available:   ")+chalk.gray("requests, bs4, numpy, AES, pad/unpad, xor, p32/u32/p64/u64")),console.log(),console.log(chalk.yellow("  Quick examples:")),console.log(chalk.gray('    base64.b64decode("aGVsbG8=")       ')+chalk.gray("# decode base64")),console.log(chalk.gray('    bytes.fromhex("48656c6c6f")        ')+chalk.gray("# hex → bytes")),console.log(chalk.gray('    "ICOA{x}".encode()                 ')+chalk.gray("# str → bytes")),console.log(chalk.gray("    [chr(c) for c in [73,67,79,65]]    ")+chalk.gray("# ASCII codes")),console.log(chalk.gray('    xor(bytes.fromhex("0a2b"), b"IC")  ')+chalk.gray("# pwntools XOR")),console.log(),console.log(chalk.gray("  Exit:  ")+chalk.white("exit()")+chalk.gray("  or Ctrl-D")),console.log(chalk.cyan("  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━")),console.log()),no=!0;try{D()&&await R()?await j(o,lo):await H(o,lo,e)}catch{console.log(chalk.yellow(`  Command failed: ${d}`))}return no=!1,console.log(),void lo.prompt()}no=!0;const w=l.trim(),f=w.toLowerCase();let $,S=null,O="";if(m)if("submit"===f)S="final";else if(f.startsWith("submit ")){let o=w.slice(7).trim();/^submit\s+/i.test(o)&&(o=o.replace(/^submit\s+/i,"").trim()),o=o.replace(/^["'`]+|["'`]+$/g,"").trim(),o&&/^ICOA\{[^}]*\}?$/i.test(o)&&(S="flag",O=o)}else/^ICOA\{[^}]+\}$/i.test(w)&&(S="flag",O=w);$="final"===S?["exam","submit"]:"flag"===S?["exam","answer",String(m?._lastQ||1),O]:function(o){const e=o.split(/\s+/),t=e[0].toLowerCase(),l=e.slice(1),n={demo:["exam","demo"],retry:["exam","demo-retry"],nations:["exam","nations"],next:["exam","next"],prev:["exam","prev"],mark:["exam","mark",...l],unmark:["exam","unmark",...l],review:["exam","review"],logout:["ctf","logout"],join:["ctf","join",...l],activate:["ctf","activate",...l],challenges:["ctf","challenges"],ch:["ctf","challenges"],open:["ctf","open",...l],submit:["ctf","submit",...l],flag:["ctf","submit",...l],scoreboard:["ctf","scoreboard",...l],sb:["ctf","scoreboard",...l],status:["ctf","status"],time:["ctf","time"]};return n[t]?n[t]:["ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","model","ctf","exam","ctf4ai"].includes(t)?[t,...l]:e}(l);const E="ctf"===$[0]&&"join"===$[1];E&&lo.pause(),process.exit=()=>{throw new Error(G)};try{await e.parseAsync(["node","icoa",...$])}catch(o){const e=o instanceof Error?o.message:String(o);if(e===G);else if(e.includes("commander.unknownCommand")){const{distance:o}=await import("fastest-levenshtein"),e=["ctf","ref","shell","files","connect","note","log","lang","setup","env","ai4ctf","exam","ctf4ai","theme","clear","cls","quit","exit","back","menu","help","continue","activate","demo","challenges","status","scoreboard","join","logout"],t=d.split(/\s+/)[0]||d;let l={word:"",dist:1/0};for(const n of e){const e=o(t.toLowerCase(),n);e<l.dist&&(l={word:n,dist:e})}console.log(chalk.yellow(`  Unknown command: ${d}.`)),l.dist>0&&l.dist<=2&&console.log(chalk.gray("  Did you mean: ")+chalk.bold.cyan(l.word)+chalk.gray("?")),console.log(chalk.gray("  Type ")+chalk.cyan("help")+chalk.gray(" for the full command list."))}else e.includes("commander.")||(e.includes("fetch failed")||e.includes("ECONNREFUSED")||e.includes("ETIMEDOUT"))&&console.log(chalk.yellow("  Network error. Check your connection."))}finally{process.exit=P,no=!1,E&&lo.resume()}b()?lo.setPrompt(chalk.magenta("ai4ctf> ")):v()?lo.setPrompt(chalk.red("ctf4ai> ")):A()&&lo.setPrompt(chalk.bold.cyan("vla4ctf> ")),console.log(),lo.prompt()}),lo.on("SIGINT",()=>{if(console.log(),b()||v())console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still in the AI chat.")),console.log(chalk.white("  Type ")+chalk.bold.cyan("exit")+chalk.white(" to leave the chat and return to the menu."));else if(k()){const o="demo-free"!==k().session.examId;console.log(chalk.yellow("  Ctrl+C did NOT close ICOA CLI.")),console.log(chalk.gray(`  Your ${o?"exam":"demo"} is paused and every answer is auto-saved.`)),console.log(),console.log(chalk.white("  Resume: ")+chalk.cyan("exam q 1")+chalk.gray("  ·  Back to menu: ")+chalk.cyan("back")+chalk.gray("  ·  Close CLI: ")+chalk.cyan(o?"quit confirm":"quit"))}else console.log(chalk.yellow("  Ctrl+C did not close ICOA CLI — you are still at the ")+chalk.cyan("icoa>")+chalk.yellow(" prompt.")),console.log(chalk.gray("  Keep typing — ")+chalk.cyan("help")+chalk.gray(" lists commands. (Only ")+chalk.cyan("quit")+chalk.gray(" or Ctrl+D actually close the CLI.)"));console.log(),lo.prompt()}),lo.on("close",()=>{M(),g(),q(),P(0)})}function H(o,t,l){return new Promise(n=>{const s=process.stdin,a=!!s.isTTY&&!!s.isRaw;if(t.pause(),s.isTTY&&"function"==typeof s.setRawMode)try{s.setRawMode(!1)}catch{}const r=e(o,{shell:!0,stdio:"inherit",cwd:l||process.cwd()}),i=()=>{if(s.isTTY&&"function"==typeof s.setRawMode&&a)try{s.setRawMode(!0)}catch{}t.resume(),n()};r.on("close",i),r.on("error",i)})}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "icoa-cli",
-  "version": "2.19.141",
+  "version": "2.19.142",
   "description": "ICOA CLI — The world's first CLI-native cyber & AI security olympiad terminal: AI4CTF (Day 1), CTF4AI (Day 2), VLA4CTF (Pioneer Round — embodied AI)",
   "type": "module",
   "bin": {